CVE-2026-6485: Insyde Software INSYDEH2O

High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days.

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.

Affected products

• Insyde Software INSYDEH2O

Published 2026-09-09. Last modified 2026-09-10.